Enterprise Risk & Audit Leader

Kast; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

KAST is seeking a Risk & Audit Lead to establish and own an independent function across the organization, with an enterprise-wide remit beyond technology. You will build the risk framework, drive RCSA and KRIs, and lead internal audits, providing neutral validation of controls while collaborating with Engineering, Security, Legal, Compliance and Finance.

The role requires 8+ years in risk, audit, cybersecurity or controls, with strong stakeholder management and a track record of addressing

Qualifications

• 8+ years of experience in risk, audit, cybersecurity, or controls with enterprise-wide scope
• Strong understanding of enterprise risk management alongside information security and technology risk
• Experience auditing across business and technology environments and identifying control gaps
• Led or managed compliance certification projects (ISO and others) and/or tech compliance certifications such as SOC 2 and PCI DSS
• Good understanding of access management, data controls, secrets/API keys, and security testing
• Strong stakeholder management with senior leaders, auditors and regulators

Responsibilities

• Build and run an independent, enterprise-wide risk and audit function across KAST.
• Own the enterprise risk framework: identify, assess, and track risks across all business areas.
• Define and drive risk management activities including RCSA and KRIs.
• Drive internal audit activities across the full audit lifecycle and report to leadership.
• Provide neutral validation of controls and compliance work to avoid duplication.
• Review security and technology controls, policies, and processes with focus on high-risk areas.
• Assess cybersecurity practices, conduct penetration testing, vulnerability assessments, and remediation.
• Own enterprise resilience practices such as BCP/DR and annual tests.
• Partner with Engineering, Security, Legal, Compliance, Finance and others while staying independent.
• Develop and maintain risk and audit frameworks, policies, and processes.

Skills

Enterprise risk management

Information security

Technology risk

Audit across business and tech

Compliance certifications (ISO/SOC 2/P

Job description

KAST is seeking a Risk & Audit Lead to establish and own an independent function across the organization, with an enterprise-wide remit beyond technology. You will build the risk framework, drive RCSA and KRIs, and lead internal audits, providing neutral validation of controls while collaborating with Engineering, Security, Legal, Compliance and Finance.

The role requires 8+ years in risk, audit, cybersecurity or controls, with strong stakeholder management and a track record of addressing